$ rpki-client -vvf repo-rpki.idnic.net/repo/56f1eb4b-48dc-4eea-9181-128cb28b3dba/0/FA5F6CC99BAC829D4DE7BECEE823199657D018CD.mft File: FA5F6CC99BAC829D4DE7BECEE823199657D018CD.mft (raw, json) Hash identifier: Ns1a5LCLdR19sLjkwV2XrNfVneVu3AFiFslmsQl2soQ= Subject key identifier: D3:AB:D3:05:10:A2:1E:6D:8E:6C:3E:00:A4:3C:6A:BC:A4:E7:EA:79 Authority key identifier: FA:5F:6C:C9:9B:AC:82:9D:4D:E7:BE:CE:E8:23:19:96:57:D0:18:CD Certificate issuer: /CN=FA5F6CC99BAC829D4DE7BECEE823199657D018CD Certificate serial: 78D6AA43B3AC0E5D455E9BB220CC2BE87A33949C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FA5F6CC99BAC829D4DE7BECEE823199657D018CD.cer Subject info access: rsync://repo-rpki.idnic.net/repo/56f1eb4b-48dc-4eea-9181-128cb28b3dba/0/FA5F6CC99BAC829D4DE7BECEE823199657D018CD.mft Manifest number: 0175 Signing time: Thu 16 Apr 2026 03:51:29 +0000 Manifest this update: Thu 16 Apr 2026 03:46:29 +0000 Manifest next update: Sun 19 Apr 2026 06:00:29 +0000 Files and hashes: 1: 3138302e39342e382e302f32342d3234203d3e20313532303430.roa (hash: gDLjvs7mUZTJqV7sQahqgCZp1Ur5vaxNFNQ6lwvC3fA=) 2: 3138302e39342e392e302f32342d3234203d3e20313532303430.roa (hash: wEcX2juwCI4r7czUlMraVPKObT0SxDceFI9YFbZ+Zxg=) 3: FA5F6CC99BAC829D4DE7BECEE823199657D018CD.crl (hash: XUt7/Toe1+VbmXyLAcbiJFI9Yxcb+CDWCtvz+VfD5iw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/56f1eb4b-48dc-4eea-9181-128cb28b3dba/0/FA5F6CC99BAC829D4DE7BECEE823199657D018CD.crl rsync://repo-rpki.idnic.net/repo/56f1eb4b-48dc-4eea-9181-128cb28b3dba/0/FA5F6CC99BAC829D4DE7BECEE823199657D018CD.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FA5F6CC99BAC829D4DE7BECEE823199657D018CD.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 19 Apr 2026 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78:d6:aa:43:b3:ac:0e:5d:45:5e:9b:b2:20:cc:2b:e8:7a:33:94:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FA5F6CC99BAC829D4DE7BECEE823199657D018CD Validity Not Before: Apr 16 03:46:29 2026 GMT Not After : Apr 19 06:00:29 2026 GMT Subject: CN=D3ABD30510A21E6D8E6C3E00A43C6ABCA4E7EA79 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:50:84:77:62:66:54:10:52:5a:3f:00:eb:bd: 1f:be:2a:44:a0:9c:4b:e2:bf:e5:26:90:8b:17:24: c0:36:45:d3:ee:c2:94:21:0d:da:f6:20:c4:ed:0e: 67:c7:41:25:0b:12:a0:d1:80:00:d4:a4:d8:56:29: 1e:12:37:58:09:96:e1:37:d2:bf:ac:7a:61:1e:73: 52:7a:35:ae:58:b9:b7:59:53:83:b5:be:dd:ed:2a: c0:5d:29:81:3c:8f:36:51:af:c6:c6:ee:b3:90:74: 07:a4:36:a4:ad:81:4b:ac:f6:69:43:49:dc:0c:f3: 85:16:bd:4d:f3:94:57:c9:90:bf:ce:ed:dd:46:00: 71:e4:3b:41:70:b5:af:fb:60:f2:a6:49:f4:48:f1: 5a:ce:cb:c2:68:71:cc:47:b1:8a:88:d5:fd:e7:63: 17:56:80:60:ba:58:1c:4a:75:a2:7f:2b:ed:b6:ad: 14:e8:1f:6b:b6:a1:85:2e:95:fa:3a:6f:fe:21:a4: fe:a2:6a:93:19:63:63:55:3b:ad:76:6b:6e:5b:3f: f2:8f:22:67:eb:2f:b9:25:45:30:54:6f:9a:66:c5: 8c:57:a7:e1:63:de:f2:03:7a:2a:fc:db:57:e1:02: b9:d6:33:88:06:e9:87:38:0a:09:bb:24:ec:30:5e: 0e:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:AB:D3:05:10:A2:1E:6D:8E:6C:3E:00:A4:3C:6A:BC:A4:E7:EA:79 X509v3 Authority Key Identifier: keyid:FA:5F:6C:C9:9B:AC:82:9D:4D:E7:BE:CE:E8:23:19:96:57:D0:18:CD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/56f1eb4b-48dc-4eea-9181-128cb28b3dba/0/FA5F6CC99BAC829D4DE7BECEE823199657D018CD.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FA5F6CC99BAC829D4DE7BECEE823199657D018CD.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/56f1eb4b-48dc-4eea-9181-128cb28b3dba/0/FA5F6CC99BAC829D4DE7BECEE823199657D018CD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 89:ea:30:16:28:f2:2e:d1:f9:de:d6:88:1a:dc:3a:84:a0:13: e0:b9:34:80:bd:a4:a7:02:be:c7:e9:d2:01:f1:f3:5b:53:70: fc:89:e6:f2:04:f8:0f:92:fd:f9:85:1f:9d:bd:0c:e3:f4:d2: 8d:be:30:e6:03:9a:e5:c6:5f:f6:13:78:c1:27:28:08:6d:e9: 35:a9:61:77:58:23:a0:5e:fc:72:dc:88:e5:77:4f:85:9d:f6: ff:5b:43:47:56:40:60:d5:09:86:dc:88:6c:e8:17:71:66:95: 32:73:58:d3:97:39:20:63:c4:b2:63:6e:6c:62:54:3f:27:01: 87:64:bd:fa:1e:3f:e5:9d:a4:b1:dd:e2:2a:35:99:46:aa:58: a5:77:1d:48:59:ba:89:33:16:c4:3a:a9:1b:bd:c4:18:98:c8: c0:86:99:54:e6:65:36:fb:b5:56:97:1c:96:31:64:3f:54:5a: 75:df:9f:c9:43:48:03:42:e4:f6:70:c9:ea:4f:7e:98:42:62: a2:8c:0a:a5:d0:52:65:6b:57:5d:72:71:77:b9:1f:4e:bc:99: 3f:9c:23:c8:05:49:3b:82:b7:bc:25:af:f9:8b:c4:70:07:95: f9:20:f8:59:67:b4:0a:0a:00:b9:82:54:e4:66:af:d7:40:b3: 45:d3:05:75 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUeNaqQ7OsDl1FXpuyIMwr6HozlJwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkE1RjZDQzk5QkFDODI5RDRERTdCRUNFRTgyMzE5OTY1 N0QwMThDRDAeFw0yNjA0MTYwMzQ2MjlaFw0yNjA0MTkwNjAwMjlaMDMxMTAvBgNV BAMTKEQzQUJEMzA1MTBBMjFFNkQ4RTZDM0UwMEE0M0M2QUJDQTRFN0VBNzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2UIR3YmZUEFJaPwDrvR++KkSg nEviv+UmkIsXJMA2RdPuwpQhDdr2IMTtDmfHQSULEqDRgADUpNhWKR4SN1gJluE3 0r+semEec1J6Na5YubdZU4O1vt3tKsBdKYE8jzZRr8bG7rOQdAekNqStgUus9mlD SdwM84UWvU3zlFfJkL/O7d1GAHHkO0Fwta/7YPKmSfRI8VrOy8JoccxHsYqI1f3n YxdWgGC6WBxKdaJ/K+22rRToH2u2oYUulfo6b/4hpP6iapMZY2NVO612a25bP/KP ImfrL7klRTBUb5pmxYxXp+Fj3vIDeir821fhArnWM4gG6Yc4Cgm7JOwwXg4/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU06vTBRCiHm2ObD4ApDxqvKTn6nkwHwYDVR0j BBgwFoAU+l9syZusgp1N577O6CMZllfQGM0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 NmYxZWI0Yi00OGRjLTRlZWEtOTE4MS0xMjhjYjI4YjNkYmEvMC9GQTVGNkNDOTlC QUM4MjlENERFN0JFQ0VFODIzMTk5NjU3RDAxOENELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRkE1RjZDQzk5QkFDODI5RDRERTdCRUNFRTgyMzE5OTY1N0Qw MThDRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTZmMWViNGItNDhkYy00ZWVhLTkx ODEtMTI4Y2IyOGIzZGJhLzAvRkE1RjZDQzk5QkFDODI5RDRERTdCRUNFRTgyMzE5 OTY1N0QwMThDRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAInqMBYo8i7R+d7WiBrcOoSgE+C5NIC9pKcC vsfp0gHx81tTcPyJ5vIE+A+S/fmFH529DOP00o2+MOYDmuXGX/YTeMEnKAht6TWp YXdYI6Be/HLciOV3T4Wd9v9bQ0dWQGDVCYbciGzoF3FmlTJzWNOXOSBjxLJjbmxi VD8nAYdkvfoeP+WdpLHd4io1mUaqWKV3HUhZuokzFsQ6qRu9xBiYyMCGmVTmZTb7 tVaXHJYxZD9UWnXfn8lDSANC5PZwyepPfphCYqKMCqXQUmVrV11ycXe5H068mT+c I8gFSTuCt7wlr/mLxHAHlfkg+FlntAoKALmCVORmr9dAs0XTBXU= -----END CERTIFICATE-----Generated at Fri Apr 17 14:58:18 2026 by rpki-client